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@ Data processing system. 

(g) The memory area within an electronic toiien of the 'smart 
card* type comprising a processor (4), memory (7, 8, 9) end 
input/output means (5) is divided into an execute only region 
and a non-volatile read/write region. 

A method of loading an applications program is described In 
which the program is loaded into a portion of the read/write 
region by software methods and in which the applteatlon 
program may be altered if the use of ttie card alters. 



Opsrallng tysleoi 


Ssotre memonr 
Eieeule oatr 


|r- 

Ik&ftss 


AnlicaUoiit praoram Write mnurr 


Ti 


Data memory 


BeadWriie 
manory 



1 



Bundesdruckerei Berlin 



DOCID: <EP__029224aA2J.> 



1 



0292248 



2 



Description 

Data processing 

This invention relates to a data processing system 
of the type comprising one or more portable 
electronic tokens, each comprising processing 5 
means, memory means and input/output means and 
one or more fixed read/write terminals, and in 
particular but not exctusivety It relates to such a 
system as is disclosed in United Kingdom published 
patent application number GB2173623A. which is 10 
incorporated herein by reference. 

Transactions between such tokens, often known 
as 'smart cards' and the read/write terminals are 
performed under the control of software, known as 
applications software, residing in both the card and IS 
the terminals. The algorithms implemented by the 
applications software in the card generally deter- 
mines in full the operation of the card. Convention- 
ally, the application software is embedded into the 
card at manufacture and is contained within a ROM 20 
such that it can not be altered. Each ROM Is 
therefore designed with a |3articular program and. 
application in mind and to change the ROM, and 
hence the use of the card, necessitates a consider- 
able expenditure and time and requires new masks 25 
to be nrmde. 

The present Invention arose from the need to 
produce a card, the software within which is 
relatively easily changeable to satisfy each different 
application of the card. $o 

According to the present invention In a first aspect 
there is provided a method of bading software into a 
portable electronic token of the type comprising 
processing means, memory means and Input/output 
means and adapted for interaction with a read/write 3S 
terminal, wherein the memory means comprises an 
execute only or read only memory region and a 
non-volatile read/write region, which method com- 
prises operatively coupling the token and terminal. 
Interchanging messages, under control of an opera- 40 
ting system stored in the execute or read only 
region, between the token and terminal to check 
whether the token and terminal are authorised, and, 
only if authorisatton is estabfished; loading a pro- 
gram code adapted to form an appBcatlon program 45 
Into a portion of the read/write memory regton; 
establishing a partition between the loaded applica- 
tion program and the remainder of the read/write- 
memory region, thus leaving the remainder of the 
read/write region free for data storage. • SO 

In a preferred embodiment, the token is adapted 
to Interact with the terminal by inductive coupfing 
and such coupling Is used to load the applications 
software. 

The position of the partition can be varied SS 
dependent upon the envisaged uses of the token. 
The appQcatlon software will then remain within the 
electronic token even when it is not operatively 
coupied to a terminal, until It is wished to load a new 
program. 60 

Advantageously, the execute only memory region 
may Include within it software such that after 
appKcations software has been loaded into the 
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read/write region, checked and tested, the software 
routine alters, by means of software or hardware, the 
circuitry within the token such that the applications 
program is permanently stored within the token and 
may not t)e removed or altered by means of ^ 
loading procedure described above. 

In a second aspect the invention provides an 
electronic system comprising portable electronic 
token comprising processing means, memory 
means and input/output means and a read/write 
terminal for interacting with the token, wherein the 
memory means and Input/output means a read/write 
terminal for interacting with the token, wherein the 
memory means comprises an execute only or Read 
only memory region and a non-volatile read/write 
memory region and wherein applications software is 
stored in a variable size portion of the read/write 
region. 

The Read/wrtte region may t)e an E^PROM, 
battery-barked RAM or any other appropriate non- 
volatile Read/Write memory. 

Embodiments of the invention will now be de- 
scribed by way of example only with reference to the 
accompanying drawings In whrch, 

Figure 1 shows in block form elements of the 
electronic token and coupler embodying the 
present invention and 

Figure 2 shows the anrangement of memory 
areas within the token. 

Refenring to Figure 1 the general arrangement of 
an electronic token or card system is shown. A host 
computer 1 which may l>e a personal computer (PC) 
is connected to a coupler unit 2. This unit is arranged 
to Inductively couple with a portable electronic 
token, shown here as card 3. This is a small 
hand-held token, pertiaps of credit-card sized 
proportion. Coupling between the card and coupler 
Is achieved inductively by means of modulated fiekis, 
as is described In the aforementioned British patent 
applteation no. GB2173623A. Card 3 comprises a 
micro-processor 4 of any convenient type, a Re- 
ceive/Transmit circuit 5 and F>ower supply means 6 
which may either be an on board battery or, more 
preferably, means for tapping off power whteh Is 
inductively coupied from the coupler 2. The card 
further irKludes a memory region whk^h is divided, 
according to the invention, into three areas; an 
operating system area 7, applications program 
area 8 and" data storage area 9. Operating system 
area 7 Is of execute only type and areas 8 and 9 are 
of non volatile read/write memory, and may for 
instance be E^ ROM or battery-backed RAM. 

Operating system, application program and data 
storage may occui^y adjacent areas of memory 
within one integrated circuit The microprocessor 
and memory may be embodied In a single integrated 
circuit 

Ihe coupler 2 comprises a demodulator 10 and 
modulator 11 for processing modulated signals 
received or transmitted after amplification by ah 
amplifier 12. Unmodulated signals, either after 
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demodulation or before modulation are fed to or 
from suitable communication lines of host computer 
1. 

The loading procedure for such a system will now 
be described. Upon power up i.e. operatively 
coupling the card 3 and coupler 2. the microproces- 
sor 4 begins to execute instructions residing In the 
operating system. As stated above, In the preferred 
system the memory portion storing the operating 
system is execute only and will be set upon 
manufacture. The data within it can be neither read 
nor written to by any application program. Embodi- 
ments of the invention are however envisaged in 
which this region Is Read only. An Initiansatlon 
sequence follows, an 'answer to reset* character is 
Issued and then a loading routine begins. The card 
waits to receive a message to indicate that It is in 
communication with the loading temiinal, which in 
this case is coupled to an host computer 1. If the 
card receives a suitable message before a defined 
time period has elapsed, an Interchange of mess- 
ages between host computer 1 and the card takes 
place and these messages are used by the card to 
check whether authorised software Is being used 
within the host computer 1. Such authorisation 
procedures will be well known to those skilled in the 
art and can be used to prevent a card being 
programmed by means other than that defined by 
the card manufacturer or user. For instance, coded 
messages could be exchanged, and authentication 
or eneryption processes using shared secret keys 
may be Implemented. If the card has been satisfied 
that the k>ader, i.e. host computer 1, Is authorised, 
the card wOl clear its application memory before 
receiving a sequence of executable codes which are 
arranged to form the new application programme. 
This code is then stored In the application pro- 
gramme area 8 of the card. Finally, the software 
within the card is used to estabDsh a partition 
between the applications program area 6 and 
remainder of the read/write memory region to 
establish a data storage area 9, in which data 
relevant to the intended uses of the card can be 
stored and altered as desired. 

The partittonlng can be established by any suitable 
means. Typically, the partition may be established by 
having a pointer in memory which points to each 
address in tum as the applcations software is 
loaded, byte by byte. Once this software Is loaded, 
the final byte addressed by the pointer can be stored 
in a register, and, when data Is subsequently stored, 
by means of a WRITE COMMAND, this register Is 
accessed s^cLused tojsro^e^a addr<e>s.s^ in. 

the altowed region, which Is encoded in a header 
transmitted.^rith-.the data.- . 

The memory areas of the card are shown In 
Rgure 2 where one example Is shown having a total 
memory capability of 8 k bytes. This value may of 
course be varied as desired. Once the partition 
mentioned above has been established, then the two 
memory regions 8 and 9 are set up. although, as 
shown in figure 2, the exact memory requirements 
may vary and be movable dependent upon the 
particular applications program, and memory re- 
quirements for data storage. 



After the initial programming stage, the card may 
be removed from the terminal and will retain the 
applications program. When the card Is subse- 
quently powered up and does not receive a "loading" 
5 message after Issuing Its answer to reset, the 
operating system within the card directs the micro- 
processor to commence execution of which ever 
application program is held within its memory. 

Should a card not be satisfied of the authenticity 
10 of a loading station. It will not load a new application 
program and will halt execution. 

The loading function within the card can also be 
disabled by an applications program. Once an 
application program has been dovimloaded. de- 
15 bugged and tested. It Is often desirable that the 
card's function be fixed for the remainder of its life. 
This can be easily achieved by a slight modification 
to the application program such that It calls a routine 
held wItNn the operating system which serves to 
20 remove a software or hardware link, disabling the 
loading routine. 
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1. A method of loading software Into a 
portable electronic token (1) of the type 

SO comprising processing means (4), memory 

means (7,8,9) and input/output means (5) and 
adapted for Interaction witii a read/write termi- 
nal (2), wherein the memory means comprises 
an execute only or Read only memory region (7) 

55 and a non-volatile read/write regton (8.9). whteh 

method comprises operatively coupling the 
token and terminal, interchanging messages, 
under contix)l of an operating system stored in 
the execute or Read only region, between the 

40 token and terminal to check whether the token 

and terminal are authorised, and, only if authori- 
sation is established; loading a program code 
adapted to form an application program into a 
portion of the read/write memory region and 

45 establishing a partition between the loaded 

application program and the remainder of tiie 
read/write memory region, thus leaving the 
remainder of the read/write region free for data 
storage. 

80 2. A method as claimed In daim 1 wherein 
control of the token Is subsequently .passed to 
the appncation program after appropriate autti- 
orisationls established 

3. A method as claimed in daim 1 or claim 2 
SS wherein tiie token is adapted to Interact witti tiie 

terminal by Inductive coupling and such coup- 
ling is used to load the appGcations software. 

4. A metfiod as claimed in any of ttie 
preceding claims wherein ttie execute only 

eo memory region includes software adapted to 

alter the software or hardware of the token after 
an applications program has been loaded such 
that the applteations program cannot be 
removed or altered. 

65 5. An electronic system comprising a port- 
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able electronic token (1) comprising processing 
means (4), memory means (7,8,9) and Input/ 
output means (5) and a read/write terminal (2) 
for interacting with the token, wherein the 
memory means comprises an execute only or 5 
Read only memory region (7) and a non-volatile 
read/write memory region (8,9) and wherein 
applications software is stored in a variable size 
portion (8) of the read/write region. 

6. A system as claimed In claim 5 wherein the lo 
read/write region is an PROM. 

7. A system as claimed in claim 5 wherein the 
read/write regionJs a battery-backed ROM. 
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® Data processing system. 

@ The memory area within an electronic token of 
the 'smart card' type comprising a processor (4), 
memory (7. 8, 9) and input/output means (5) is 
divided into an execute only region and a non* 
volatile read/write region. 



A method of loading an applications program is 
described In which the program is loaded into a 
portion of the read/write region by software methods 
and in which the application program may be altered 
if the use of the card alters. 
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